--- fenglin/www/show_article.php	2025/03/06 07:39:50	1.9
+++ fenglin/www/show_article.php	2025/03/12 11:12:27	1.10
@@ -77,10 +77,10 @@ TD.content
 		<td>
 			<table width="95%" border="0" cellpadding="0" cellspacing="0">
 				<tr height="30">
-					<td align="center"><font size=4><b><? echo $row["title"]; ?> </b></font><font color=gray>[<? echo ($row["transship"]?"转载":"原创"); ?>]</font></td>
+					<td align="center"><font size=4><b><? echo htmlspecialchars($row["title"], ENT_HTML401, 'UTF-8'); ?> </b></font><font color=gray>[<? echo ($row["transship"]?"转载":"原创"); ?>]</font></td>
 				</tr>
 				<tr height="20">
-					<td align="center">(<? echo $row["sub_dt"]; ?>)   <? echo ($row["transship"]?"转载":"作者"); ?>：<? echo $row["nickname"]; ?></td>
+					<td align="center">(<? echo $row["sub_dt"]; ?>)   <? echo ($row["transship"]?"转载":"作者"); ?>：<? echo htmlspecialchars($row["nickname"], ENT_HTML401, 'UTF-8'); ?></td>
 				</tr>
 				<tr height="10">
 					<td></td>
@@ -92,7 +92,7 @@ TD.content
 					<td></td>
 				</tr>
 				<tr>
-					<td class="content"><? echo LML(htmlspecialchars($content, ENT_COMPAT | ENT_HTML401, 'UTF-8'),true,true,1024); ?></td>
+					<td class="content"><? echo LML(htmlspecialchars($content, ENT_HTML401, 'UTF-8'),true,true,1024); ?></td>
 				</tr>
 				<tr>
 					<td>